Without knowing exactly what his concern is, there's no way we can
address it (by seeing if some security patch is needed, by checking
and possibly changing some setting, or by explaining something he is
misunderstanding).
On the other hand, the cvs method accesses the identical package
collection
I advise PhD students in institution, other than place I am affiliated
with.
In my institution I have no problem to upgrade relevant software using
FINK in rsync mode.
Institution were I advise PhD students ABSOLUTELY refuses to activate
rsync approach
to the FINK sites. Their computer center c